A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libmount-develUpgrade libuuidUpgrade libfdiskUpgrade libuuid-develUpgrade uuiddUpgrade libfdisk-develUpgrade python3-libmountUpgrade libblkid-develUpgrade libblkidUpgrade util-linuxUpgrade util-linux-userUpgrade util-linux-coreUpgrade libsmartcols-develUpgrade libmountUpgrade libsmartcols | Feb 11, 2026 | Feb 3, 2026 |
| Alpine Linux | — | Upgrade util-linux | Sep 7, 2026 | Dec 5, 2025 |
| Debian | — | Upgrade util-linux | Aug 16, 2026 | Aug 16, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libsmartcolsUpgrade libblkidUpgrade libuuidUpgrade libmountUpgrade util-linuxUpgrade util-linux-userUpgrade libfdisk | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libblkidUpgrade util-linuxUpgrade libuuidUpgrade libmountUpgrade util-linux-userUpgrade libsmartcolsUpgrade libfdisk | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade util-linuxUpgrade util-linux-userUpgrade libblkidUpgrade libfdiskUpgrade libsmartcolsUpgrade libuuidUpgrade libmount | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libfdiskUpgrade util-linuxUpgrade libsmartcolsUpgrade libmountUpgrade util-linux-userUpgrade libblkidUpgrade libuuid | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Apr 8, 2026 |
| Oracle_linux | — | Upgrade util-linux-userUpgrade libfdisk-develUpgrade libmountUpgrade libblkidUpgrade libsmartcols-develUpgrade util-linux-coreUpgrade util-linuxUpgrade libsmartcolsUpgrade libuuidUpgrade libmount-develUpgrade libfdiskUpgrade libuuid-develUpgrade libblkid-develUpgrade uuiddUpgrade python3-libmount | Feb 3, 2026 | Dec 5, 2025 |
| Redhat_linux | — | Upgrade util-linux-userUpgrade util-linuxUpgrade libsmartcolsUpgrade util-linux-coreUpgrade util-linux-core-debuginfoUpgrade libsmartcols-debuginfoUpgrade libuuid-debuginfoUpgrade util-linux-user-debuginfoUpgrade libsmartcols-develUpgrade util-linux-debuginfoUpgrade libmount-debuginfoUpgrade util-linux-debugsourceUpgrade libfdiskNo solution existsUpgrade libuuid-develUpgrade libmount | Feb 3, 2026 | Dec 5, 2025 |
| Rocky_linux | — | Upgrade libuuid-debuginfoUpgrade libfdiskUpgrade libblkidUpgrade libsmartcols-debuginfoUpgrade libfdisk-debuginfoUpgrade libsmartcolsUpgrade libuuid-develUpgrade libmountUpgrade libsmartcols-develUpgrade libmount-debuginfoUpgrade util-linux-user-debuginfoUpgrade util-linux-debuginfoUpgrade libuuidUpgrade libblkid-develUpgrade util-linux-debugsourceUpgrade util-linux-userUpgrade uuidd-debuginfoUpgrade python3-libmountUpgrade libfdisk-develUpgrade python3-libmount-debuginfoUpgrade libmount-develUpgrade util-linuxUpgrade util-linux-coreUpgrade util-linux-core-debuginfoUpgrade uuiddUpgrade libblkid-debuginfo | Feb 9, 2026 | Feb 5, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub