SUSE-SU-2026:23740-1: pcre2&distro=SUSE Linux Micro 6.1 SUSE Linux Enterprise

Published

Published 15-09-2026Last modified 27-09-2026

Vulnerability summary

SUSE-SU-2026:23740-1 is a vulnerability in pcre2&distro=SUSE Linux Micro 6.1 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 6 · Downstream 0 · Related 6

CVE-2026-86145 CVE-2026-89156 CVE-2026-89157 CVE-2026-89158 CVE-2026-89160 CVE-2026-89161

Timeline

15-09-2026
PublishedVulnerability first disclosed.
27-09-2026
Last modifiedVulnerability information updated.

Description

Security update for pcre2 This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050).