Record status Published
Identifier year (not publication year) 2025
Source publication Dec 5, 2025
Source updated Oct 14, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
util-linux
Vendor util-linux
Product util-linux
Platforms Unknown
Default status unaffected
Package util-linux
Package collection https://github.com/util-linux/util-linux
util-linux · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedsemver 2.41.3 Unavailable None listed
Red Hat Enterprise Linux 10
Vendor Red Hat
Product Red Hat Enterprise Linux 10
Platforms Unknown
Default status affected
Package util-linux
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 10 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.40.2-15.el10_1 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status affected
Package util-linux
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.32.1-48.el8_10 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status affected
Package util-linux
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.32.1-48.el8_10 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package util-linux
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.37.4-21.el9_7 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package util-linux
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.37.4-21.el9_7 unaffectedrpm * Unavailable None listed
Cert Manager support for Red Hat OpenShift release 1.18
Vendor Red Hat
Product Cert Manager support for Red Hat OpenShift release 1.18
Platforms Unknown
Default status affected
Package cert-manager/jetstack-cert-manager-acmesolver-rhel9
Package collection https://catalog.redhat.com/software/containers/
Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1791459707 unaffectedrpm * Unavailable None listed
Cert Manager support for Red Hat OpenShift release 1.18
Vendor Red Hat
Product Cert Manager support for Red Hat OpenShift release 1.18
Platforms Unknown
Default status affected
Package cert-manager/jetstack-cert-manager-rhel9
Package collection https://catalog.redhat.com/software/containers/
Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1791459711 unaffectedrpm * Unavailable None listed
Cert Manager support for Red Hat OpenShift release 1.18
Vendor Red Hat
Product Cert Manager support for Red Hat OpenShift release 1.18
Platforms Unknown
Default status affected
Package cert-manager/cert-manager-istio-csr-rhel9
Package collection https://catalog.redhat.com/software/containers/
Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1791459759 unaffectedrpm * Unavailable None listed
Cert Manager support for Red Hat OpenShift release 1.18
Vendor Red Hat
Product Cert Manager support for Red Hat OpenShift release 1.18
Platforms Unknown
Default status affected
Package cert-manager/cert-manager-operator-rhel9
Package collection https://catalog.redhat.com/software/containers/
Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1789029076 unaffectedrpm * Unavailable None listed
Cert Manager support for Red Hat OpenShift release 1.18
Vendor Red Hat
Product Cert Manager support for Red Hat OpenShift release 1.18
Platforms Unknown
Default status affected
Package cert-manager/cert-manager-operator-bundle
Package collection https://catalog.redhat.com/software/containers/
Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1791966259 unaffectedrpm * Unavailable None listed
Red Hat Ceph Storage 7
Vendor Red Hat
Product Red Hat Ceph Storage 7
Platforms Unknown
Default status affected
Package rhceph/rhceph-7-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Ceph Storage 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1770632724 unaffectedrpm * Unavailable None listed
Red Hat Ceph Storage 8
Vendor Red Hat
Product Red Hat Ceph Storage 8
Platforms Unknown
Default status affected
Package rhceph/rhceph-8-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Ceph Storage 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1770630907 unaffectedrpm * Unavailable None listed
Red Hat Ceph Storage 9
Vendor Red Hat
Product Red Hat Ceph Storage 9
Platforms Unknown
Default status affected
Package rhceph/rhceph-9-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Ceph Storage 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1771816028 unaffectedrpm * Unavailable None listed
Red Hat Hardened Images
Vendor Red Hat
Product Red Hat Hardened Images
Platforms Unknown
Default status affected
Package util-linux-main
Package collection https://catalog.redhat.com/software/containers/
Red Hat Hardened Images · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 2.42-7.1.hum1 unaffectedrpm * Unavailable None listed
Red Hat Insights proxy 1.5
Vendor Red Hat
Product Red Hat Insights proxy 1.5
Platforms Unknown
Default status affected
Package insights-proxy/insights-proxy-container-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Insights proxy 1.5 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1770740405 unaffectedrpm * Unavailable None listed
Red Hat Update Infrastructure 5
Vendor Red Hat
Product Red Hat Update Infrastructure 5
Platforms Unknown
Default status affected
Package rhui5/installer-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Update Infrastructure 5 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1770646925 unaffectedrpm * Unavailable None listed
Red Hat Update Infrastructure 5
Vendor Red Hat
Product Red Hat Update Infrastructure 5
Platforms Unknown
Default status affected
Package rhui5/cds-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Update Infrastructure 5 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1773670073 unaffectedrpm * Unavailable None listed
Red Hat Update Infrastructure 5
Vendor Red Hat
Product Red Hat Update Infrastructure 5
Platforms Unknown
Default status affected
Package rhui5/haproxy-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Update Infrastructure 5 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1773672059 unaffectedrpm * Unavailable None listed
Red Hat Update Infrastructure 5
Vendor Red Hat
Product Red Hat Update Infrastructure 5
Platforms Unknown
Default status affected
Package rhui5/rhua-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Update Infrastructure 5 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1773670137 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 6
Vendor Red Hat
Product Red Hat Enterprise Linux 6
Platforms Unknown
Default status affected
Package util-linux-ng
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 7
Vendor Red Hat
Product Red Hat Enterprise Linux 7
Platforms Unknown
Default status affected
Package util-linux
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
Vendor Red Hat
Product Red Hat OpenShift Container Platform 4
Platforms Unknown
Default status affected
Package openshift/ose-rhel-coreos-8
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
Vendor Red Hat
Product Red Hat OpenShift Container Platform 4
Platforms Unknown
Default status affected
Package openshift/ose-rhel-coreos-9
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.