GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. This incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input. When running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure. This issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-25427610bb advisory.

    * fix CVE-2026-56391

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-36041358b1 advisory.

    * fix CVE-2026-56391

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-217bb52eb2 advisory.

    Automatic update for coreutils-9.11-6.fc45.

    ##### **Changelog**

    ```
    * Mon Aug  3 2026 Luk Zaoral <lzaoral@redhat.com> - 9.11-6
    - CVE-2026-56391 - uniq: fix read overrun with -w (rhbz#2507449)
    - tee: fix infinite loop when write returns EAGAIN and short write errors

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GNU coreutils uniq is vulnerable to an outofbounds read due to incorrect handling of multibyte input     when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of     characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in     an inflated length value. This incorrect length is later used in a memcmp operation, causing reads beyond     the allocated buffer when processing crafted multibyte input. When running GNU coreutils uniq with     attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.
    This issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371. (CVE-2026-56391)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
333256	Fedora 43 : coreutils (2026-25427610bb)	Nessus	Fedora Local Security Checks	Local	medium
332085	Fedora 44 : coreutils (2026-36041358b1)	Nessus	Fedora Local Security Checks	Local	medium
331670	Fedora 45 : coreutils (2026-217bb52eb2)	Nessus	Fedora Local Security Checks	Local	medium
329558	Linux Distros Unpatched Vulnerability : CVE-2026-56391	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-56391

medium

Tenable Plugins

medium

medium

medium

medium