Bug 2419369 (CVE-2025-14104) - CVE-2025-14104 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
Summary: CVE-2025-14104 util-linux: util-linux: Heap buffer overread in setpwnam() whe...
Keywords:
Status: NEW
Alias: CVE-2025-14104
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2419370 2419371
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-12-05 14:21 UTC by OSIDB Bzimport
Modified: 2025-12-05 14:32 UTC (History)
8 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-12-05 14:21:04 UTC 
A flaw was found in util-linux. Heap buffer overread when processing 256-byte usernames.
Affects any SUID login-utils utility writing to password database. The setpwnam() function allocates a 256-byte buffer but accesses linebuf[256] when username length equals 256, causing a heap buffer overread.
Note You need to log in before you can comment on or make changes to this bug.