CVE-2025-14104

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

State: Published
Severity: 6.1 Medium
Published: Dec 5, 2025
Updated: Oct 14, 2026
Reserved: Dec 5, 2025

Description

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

Scores

CVSS	Score	Vector	Source
3.1	6.1 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H	redhat

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
util-linuxutil-linux	before 2.41.3Affected
Red Hat Enterprise Linux 10Red Hat	0:2.40.2-15.el10_1 and laterNot affected
Red Hat Enterprise Linux 8Red Hat	0:2.32.1-48.el8_10 and laterNot affected
Red Hat Enterprise Linux 8Red Hat	0:2.32.1-48.el8_10 and laterNot affected
Red Hat Enterprise Linux 9Red Hat	0:2.37.4-21.el9_7 and laterNot affected
Red Hat Enterprise Linux 9Red Hat	0:2.37.4-21.el9_7 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat	1791459707 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat	1791459711 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat	1791459759 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat	1789029076 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat	1791966259 and laterNot affected
Red Hat Ceph Storage 7Red Hat	1770632724 and laterNot affected
Red Hat Ceph Storage 8Red Hat	1770630907 and laterNot affected
Red Hat Ceph Storage 9Red Hat	1771816028 and laterNot affected
Red Hat Hardened ImagesRed Hat	2.42-7.1.hum1 and laterNot affected
Red Hat Insights proxy 1.5Red Hat	1770740405 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1770646925 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1773670073 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1773672059 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1773670137 and laterNot affected
Red Hat Enterprise Linux 6Red Hat
Red Hat Enterprise Linux 7Red Hat
Red Hat OpenShift Container Platform 4Red Hat
Red Hat OpenShift Container Platform 4Red Hat

References

RHSA-2026:1696vendor-advisory
RHSA-2026:1852vendor-advisory
RHSA-2026:1913vendor-advisory
RHSA-2026:2485vendor-advisory
RHSA-2026:2563vendor-advisory
RHSA-2026:2737vendor-advisory
RHSA-2026:2800vendor-advisory
RHSA-2026:3406vendor-advisory
RHSA-2026:4943vendor-advisory
RHSA-2026:7180vendor-advisory
RHSA-2026:82347vendor-advisory
RHSA-2026:82354vendor-advisory
RHSA-2026:82372vendor-advisory
RHSA-2026:82857vendor-advisory
https://access.redhat.com/security/cve/CVE-2025-14104vdb-entry
RHBZ#2419369issue-tracking

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.