{"id":"CVE-2026-89088","kind":"vulnerability","aliases":["CVE-2026-89088"],"related":[],"title":"parted: heap overflow resizing crafted FAT16 image crashes the tool","description":"A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).","summary":"A heap-based buffer overflow in libparted's file system resizing code, triggered by malformed directory metadata in a FAT16 volume, causes a read past a fixed-size buffer. An attacker who gets a user or administrator to resize a crafted FAT16 image can crash the application and cause denial of service.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["disk-tooling","libparted","linux","package","parted"],"not_affected_if":["no-fat16-resize","no-untrusted-images"],"how_to_check":"- `parted --version` to see the installed version\n- unknown for the exact affected version range, the sources do not say","fix":"- unknown, the sources do not name a fixed parted or libparted version\n- Avoid resizing untrusted FAT16 images until a patched build is installed","status":"open","published_at":"2026-10-16T23:17:02+00:00","first_seen_at":"2026-10-23T21:57:14+00:00","triaged_at":"2026-10-25T04:14:04+00:00","updated_at":"2026-10-25T04:14:04+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T04:14:04Z","model":"claude-haiku-5-5","output":{"fix":"- unknown, the sources do not name a fixed parted or libparted version\n- Avoid resizing untrusted FAT16 images until a patched build is installed","reach":"local","title":"parted: heap overflow resizing crafted FAT16 image crashes the tool","impact":"low","summary":"A heap-based buffer overflow in libparted's file system resizing code, triggered by malformed directory metadata in a FAT16 volume, causes a read past a fixed-size buffer. An attacker who gets a user or administrator to resize a crafted FAT16 image can crash the application and cause denial of service.","category":"package","nicknames":[],"who_cares":["linux","parted","libparted","disk-tooling"],"confidence":0.6,"needs_auth":"no","worst_case":"Crash of parted causing denial of service on the host","analyst_note":"Check the NVD entry and the upstream parted/libparted advisory for affected and fixed versions; the sources give no version data.","how_to_check":"- `parted --version` to see the installed version\n- unknown for the exact affected version range, the sources do not say","needs_analyst":true,"not_affected_if":["no-untrusted-images","no-fat16-resize"],"who_is_affected":"Teams that run parted or libparted to resize file systems, especially on disk images or volumes from untrusted sources. The sources describe a user or administrator being convinced to resize a specially crafted FAT16 image, so routine resizing of trusted local disks carries little exposure. Systems that never run parted's resize on FAT16 can skip it.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000615,"input_tokens":3329,"output_tokens":565,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-89088':13A,16A 'administr':62B,107C 'applic':72B,143C 'attack':56B,122C 'base':27B,87C 'buffer':28B,54B,88C,134C 'caus':46B,74B,137C 'code':36B 'convinc':103C 'corrupt':139C 'craft':5A,66B,112C 'crash':8A,70B,144C 'cve':11A,14A 'denial':75B,147C 'directori':40B,119C 'disk':18B 'disk-tool':17B 'dos':150C 'exist':90C 'fat16':6A,44B,67B,100C,113C 'file':33B,94C,114C 'fix':52B,131C 'fixed-s':51B,130C 'flaw':79C 'found':81C 'get':58B 'handl':99C 'heap':2A,26B,86C 'heap-bas':25B,85C 'imag':7A,68B,116C 'issu':136C 'libpart':20B,31B,92C 'linux':21B 'logic':97C 'malform':39B,118C 'memori':133C,138C 'metadata':41B,120C 'overflow':3A,29B,89C 'overs':126C 'packag':22B 'part':1A,23B,83C 'past':49B 'read':48B,127C 'resiz':4A,35B,64B,96C,109C 'result':140C 'servic':77B,149C 'size':53B,132C 'special':111C 'system':34B,95C,115C 'tool':10A,19B 'trigger':37B,124C 'user':60B,105C 'volum':45B,101C","nicknames":[],"mitigations":[],"who_affected":"Teams that run parted or libparted to resize file systems, especially on disk images or volumes from untrusted sources. The sources describe a user or administrator being convinced to resize a specially crafted FAT16 image, so routine resizing of trusted local disks carries little exposure. Systems that never run parted's resize on FAT16 can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-16T23:17:02+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss_by":"secalert@redhat.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-89088","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89088","severity":null,"published_at":"2026-10-16T23:17:02+00:00","modified_at":"2026-10-19T21:03:27+00:00","first_seen_at":"2026-10-23T21:57:14+00:00","fetched_at":"2026-10-23T22:28:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}