Log in Start free

Vulnerability · Published Dec 5, 2025 · Assigned by redhat

CVE-2025-14104Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

Medium 6.1

In plain English

A medium-severity out-of-bounds read in Cert Manager support for Red Hat OpenShift release 1.18 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)0.2%top 88.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10libblkid2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:8libblkid2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9libblkid2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:10libblkid-devel2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:8libblkid-devel2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9libblkid-devel2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:10libfdisk2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:8libfdisk2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9libfdisk2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:10libfdisk-devel2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:8libfdisk-devel2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9libfdisk-devel2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:10libmount2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:8libmount2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9libmount2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:10libmount-devel2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:8libmount-devel2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9libmount-devel2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:10libsmartcols2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:8libsmartcols2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9libsmartcols2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:10libsmartcols-devel2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:8libsmartcols-devel2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9libsmartcols-devel2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:10libuuid2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:8libuuid2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9libuuid2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:10libuuid-devel2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:8libuuid-devel2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9libuuid-devel2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:10python3-libmount2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:8python3-libmount2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9python3-libmount2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:10util-linux2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:8util-linux2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9util-linux2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:10util-linux-core2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:9util-linux-core2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:8util-linux-user2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9util-linux-user2.37.4-21.el9_7ALSA-2026:1913
AlmaLinux:10uuidd2.40.2-15.el10_1ALSA-2026:1696
AlmaLinux:8uuidd2.32.1-48.el8_10ALSA-2026:1852
AlmaLinux:9uuidd2.37.4-21.el9_7ALSA-2026:1913
Alpine:v3.22util-linux2.41.6-r0ALPINE-CVE-2025-14104
Alpine:v3.23util-linux2.41.4-r0ALPINE-CVE-2025-14104
Debian:12util-linuxno fix listedDEBIAN-CVE-2025-14104
Debian:13util-linux2.41.3-1DEBIAN-CVE-2025-14104
Debian:14util-linux2.41.3-1DEBIAN-CVE-2025-14104
Rocky Linux:10util-linux0:2.40.2-15.el10_1RLSA-2026:1696
Rocky Linux:8util-linux0:2.32.1-48.el8_10RLSA-2026:1852
Rocky Linux:9util-linux0:2.37.4-21.el9RLSA-2026:1913

Affected products (as reported)

VendorProductVersions
util-linux util-linux 0 – before 2.41.3
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.18 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.18 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.18 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.18 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.18 see references
Red Hat Red Hat Ceph Storage 7 see references
Red Hat Red Hat Ceph Storage 8 see references
Red Hat Red Hat Ceph Storage 9 see references
Red Hat Red Hat Hardened Images see references
Red Hat Red Hat Insights proxy 1.5 see references
Red Hat Red Hat Update Infrastructure 5 see references
Red Hat Red Hat Update Infrastructure 5 see references
Red Hat Red Hat Update Infrastructure 5 see references
Red Hat Red Hat Update Infrastructure 5 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 4 see references

Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

References