Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

Summary

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

Timeline

1. Dec 5, 2025, 4:22 PM UTCCVE published
2. Dec 5, 2025, 8:03 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Oct 14, 2026, 7:31 PM UTCRecord last updated

Affected versions

• util-linux

  fixed in 2.41.3

• util-linux

  Version range not reported

• util-linux

  Version range not reported

• util-linux

  Version range not reported

• cert-manager/jetstack-cert-manager-acmesolver-rhel9

  Version range not reported

• cert-manager/jetstack-cert-manager-rhel9

  Version range not reported

• cert-manager/cert-manager-istio-csr-rhel9

  Version range not reported

• cert-manager/cert-manager-operator-rhel9

  Version range not reported

• cert-manager/cert-manager-operator-bundle

  Version range not reported

• rhceph/rhceph-7-rhel9

  Version range not reported

• rhceph/rhceph-8-rhel9

  Version range not reported

• rhceph/rhceph-9-rhel9

  Version range not reported

• util-linux-main

  Version range not reported

• insights-proxy/insights-proxy-container-rhel9

  Version range not reported

• rhui5/installer-rhel9

  Version range not reported

• rhui5/cds-rhel9

  Version range not reported

• rhui5/haproxy-rhel9

  Version range not reported

• rhui5/rhua-rhel9

  Version range not reported

• util-linux-ng

  Version range not reported

• util-linux

  Version range not reported

• openshift/ose-rhel-coreos-8

  Version range not reported

• openshift/ose-rhel-coreos-9

  Version range not reported

References 16