Affected: coreutils, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Cert Manager support for Red Hat OpenShift release 1.20, Red Hat Cost Management 4, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat OpenShift distributed tracing 3.10.2, Red Hat Update Infrastructure 5 and 3 more

A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

Affected: Ubuntu:22.04:LTS: coreutils, Ubuntu:24.04:LTS: coreutils, Ubuntu:26.04:LTS: coreutils

It was discovered that GNU Core Utilities sort had a heap buffer under-read in its begfield() function. A local attacker could possibly use this issue to cause GNU Core Utilities to crash, resulting in a denial of service, or obtain sensitive information. (CVE-2025-5278)

It was discovered that GNU Core Utilities uniq had an out-of-bounds read when the -w option was used with crafted multibyte input. A local attacker could possibly use this issue to cause GNU Core Utilities to crash, resulting in a denial of service, or obtain sensitive information. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-56391)