CVE-2026-6843

A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline() function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault (SEGV). This results in a Denial of Service (DoS) for the nano application.

This Moderate impact vulnerability in nano allows an attacker to cause a denial of service by crafting a malicious directory name containing format string specifiers. When nano attempts to display an error message related to such a directory, it can lead to a crash. This affects Red Hat Enterprise Linux and OpenShift Container Platform.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.