CVE-2026-6390
Publication date 23 July 2026
Last updated 21 September 2026
Ubuntu priority
Description
A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to achieve stack information disclosure, cause a denial of service (crash), or potentially perform arbitrary memory writes.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| nano | 26.04 LTS resolute |
Fixed 8.7.1-1ubuntu0.1
|
| 24.04 LTS noble |
Fixed 7.2-2ubuntu0.2
|
|
| 22.04 LTS jammy |
Fixed 6.2-1ubuntu0.2
|
|
| 20.04 LTS focal |
Not affected
|
|
| 18.04 LTS bionic |
Not affected
|
|
| 16.04 LTS xenial |
Not affected
|
|
| 14.04 LTS trusty |
Not affected
|
Notes
mdeslaur
This appears to be a dupe of CVE-2026-6843 which was fixed by USN-8386-1. Marking as fixed.
Severity score breakdown
CVSS version: CVSS v3.0
Base score
6.8 · Medium
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H