Known Vulnerabilities for BusyBox by Na
Listed below are 10 of the newest known vulnerabilities associated with "BusyBox" by "Na".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-108119 json | A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-lo... | Not Provided | 2026-10-09 | 2026-10-13 |
| CVE-2026-98215 json | In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files ... | Not Provided | 2026-10-06 | 2026-10-19 |
| CVE-2026-98214 json | In the Linux kernel, the following vulnerability has been resolved: selinux: recheck intermediate backing files on mprotect(... | Not Provided | 2026-10-06 | 2026-10-19 |
| CVE-2026-93208 json | In the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race with CPU hotplug kasan_qua... | Not Provided | 2026-09-24 | 2026-10-19 |
| CVE-2026-90954 json | A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archiv... | Not Provided | 2026-10-14 | 2026-10-19 |
| CVE-2026-88842 json | A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. Whe... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-88840 json | BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message. | Not Provided | 2026-09-23 | 2026-09-26 |
| CVE-2026-88839 json | BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap po... | Not Provided | 2026-09-23 | 2026-09-25 |
| CVE-2026-88838 json | A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by spec... | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2026-88837 json | BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication ch... | Not Provided | 2026-09-23 | 2026-09-25 |