CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes

• Products
  • Openwall GNU/*/Linux   server OS
  • Linux Kernel Runtime Guard
  • John the Ripper   password cracker
    • Free & Open Source for any platform
    • in the cloud
    • Pro for Linux
    • Pro for macOS
  • Wordlists   for password cracking
  • passwdqc   policy enforcement
    • Free & Open Source for Unix
    • Pro for Windows (Active Directory)
  • yescrypt   KDF & password hashing
  • yespower   Proof-of-Work (PoW)
  • crypt_blowfish   password hashing
  • phpass   ditto in PHP
  • tcb   better password shadowing
  • Pluggable Authentication Modules
  • scanlogd   port scan detector
  • popa3d   tiny POP3 daemon
  • blists   web interface to mailing lists
  • msulogin   single user mode login
  • php_mt_seed   mt_rand() cracker
• Services
• Publications
  • Articles
  • Presentations
• Resources
  • Mailing lists
  • Community wiki
  • Source code repositories (GitHub)
  • File archive & mirrors
  • How to verify digital signatures
  • OVE IDs
• What's new