Microsoft Security Response Center guidance
Vendor revision: Oct 24, 2026Release Notes CBL-Mariner Releases
Vendor-listed releases
- 2.7.6-7
- 2.7.6-8
Vulnerability intelligence
CVE-2018-6952 and is rated High severity with a CVSS score of 7.5. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Release Notes CBL-Mariner Releases
Vendor-listed releases
A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.
Source: NVD