Skip to content

CVE-2026-6042 on CTRL-OS 26.05

Aliases: CVE-2026-6042

Packages: musl

Status: Plausible

Advisory Information

A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.

Updates

2026-07-20 20:24 CEST

Metadata changes:

  • Status for package musl: “Plausible”

(Amended on: 2026-07-20 20:25 CEST)

2026-06-02 16:44 CEST

Metadata changes:

  • Status for package musl: “New”