UBUNTU-CVE-2026-6390

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-6390
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-6390.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-6390
Upstream
  • CVE-2026-6390
Published
2026-07-23T05:16:00Z
Modified
2026-09-21T21:39:48Z
Severity
  • 6.8 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to achieve stack information disclosure, cause a denial of service (crash), or potentially perform arbitrary memory writes.

References

Affected packages

Ubuntu:22.04:LTS / nano

Package

Name
nano
Purl
pkg:deb/ubuntu/nano?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.2-1ubuntu0.2

Affected versions

5.*
5.6.1-1build1
5.9-1
6.*
6.0-1
6.1-1
6.2-1
6.2-1ubuntu0.1

Ecosystem specific 

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "nano",
            "binary_version":  "6.2-1ubuntu0.2"
        },
        {
            "binary_name":  "nano-tiny",
            "binary_version":  "6.2-1ubuntu0.2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-6390.json"

Ubuntu:24.04:LTS / nano

Package

Name
nano
Purl
pkg:deb/ubuntu/nano?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.2-2ubuntu0.2

Affected versions

7.*
7.2-1
7.2-2
7.2-2build1
7.2-2ubuntu0.1

Ecosystem specific 

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "nano",
            "binary_version":  "7.2-2ubuntu0.2"
        },
        {
            "binary_name":  "nano-tiny",
            "binary_version":  "7.2-2ubuntu0.2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-6390.json"

Ubuntu:25.10 / nano

Package

Name
nano
Purl
pkg:deb/ubuntu/nano?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4-1ubuntu0.1

Affected versions

8.*
8.3-1
8.4-1

Ecosystem specific 

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "nano",
            "binary_version":  "8.4-1ubuntu0.1"
        },
        {
            "binary_name":  "nano-tiny",
            "binary_version":  "8.4-1ubuntu0.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-6390.json"

Ubuntu:26.04:LTS / nano

Package

Name
nano
Purl
pkg:deb/ubuntu/nano?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.7.1-1ubuntu0.1

Affected versions

8.*
8.4-1
8.6-1
8.7-1
8.7.1-1

Ecosystem specific 

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "nano",
            "binary_version":  "8.7.1-1ubuntu0.1"
        },
        {
            "binary_name":  "nano-tiny",
            "binary_version":  "8.7.1-1ubuntu0.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-6390.json"