https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T18:55:48.350893+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-14104 CVE-2025-14104 — Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames 2026-09-28T18:55:48.353410+00:00

Affected: util-linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Ceph Storage 7, Red Hat Ceph Storage 8, Red Hat Ceph Storage 9, Red Hat Hardened Images, Red Hat Insights proxy 1.5, Red Hat Update Infrastructure 5 and 3 more

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.