Medium5.5Red Hat Linux Updated

Denial of Service via crafted spell file

CVE-2026-55892 Published Jun 25, 2026Updated by vendor Jun 25, 2026

CVE-2026-55892

Affected products & platforms

Red Hat LinuxUnclassified

Summary

Denial of Service via crafted spell file. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:35387 with package vim-main-9.2.780-1.hum1.

Affected versions

< 9.2.0662

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

Fixed versions

vim-main-9.2.780-1.hum1
RHSA-2026:35387

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Do not load untrusted spell files (.spl) from unknown sources. Avoid using :spelldump with spell files of unknown provenance.

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.