AZL-89190

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-89190.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-89190
Upstream
  • CVE-2026-42250
Published
2026-05-28T14:16:19Z
Modified
2026-08-30T05:26:50Z
Summary
CVE-2026-42250 affecting package kata-containers-cc for versions less than 3.15.0.aks0-15
Details

bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash (denial of service).

This issue was fixed in bzip2 patch 35d122a3df8b0cc4082a4d89fdc6ee99f375fe67

References

Affected packages

Azure Linux:3 / kata-containers-cc

Package

Name
kata-containers-cc
Purl
pkg:rpm/azure-linux/kata-containers-cc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.15.0.aks0-15

Database specific

source 
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-89190.json"