https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:48:52.933624+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:1696 ALSA-2026:1696 — Moderate: util-linux security update 2026-10-05T22:48:53.364809+00:00

Affected: AlmaLinux:10: libblkid, AlmaLinux:10: libblkid-devel, AlmaLinux:10: libfdisk, AlmaLinux:10: libfdisk-devel, AlmaLinux:10: libmount, AlmaLinux:10: libmount-devel, AlmaLinux:10: libsmartcols, AlmaLinux:10: libsmartcols-devel, AlmaLinux:10: libuuid, AlmaLinux:10: libuuid-devel and 4 more

The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.

Security Fix(es):

* util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-02747 bdu:2026-02747 2026-10-05T22:48:53.364903+00:00 bdu:2026-02747 https://cve.radiocsirt.org/vuln/bell-cve-2025-14104 BELL-CVE-2025-14104 2026-10-05T22:48:53.364921+00:00

Affected: Alpaquita:23: util-linux, Alpaquita:25: util-linux, Alpaquita:stream: util-linux, BellSoft Hardened Containers:23: util-linux, BellSoft Hardened Containers:25: util-linux, BellSoft Hardened Containers:stream: util-linux

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0199 certfr-2026-avi-0199 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-05T22:48:53.364949+00:00 certfr-2026-avi-0199 https://cve.radiocsirt.org/vuln/euvd-2026-362226 EUVD-2026-362226 2026-10-05T22:48:53.364965+00:00 EUVD-2026-362226 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14104 fkie_cve-2025-14104 2026-10-05T22:48:53.364977+00:00

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

 https://cve.radiocsirt.org/vuln/ghsa-hrx4-rccm-xj6c GHSA-hrx4-rccm-xj6c 2026-10-05T22:48:53.365000+00:00

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-14104 msrc_CVE-2025-14104 — Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames 2026-10-05T22:48:53.365015+00:00 msrc_CVE-2025-14104 https://cve.radiocsirt.org/vuln/oesa-2026-1184 OESA-2026-1184 — util-linux security update 2026-10-05T22:48:53.365032+00:00

Affected: openEuler:20.03-LTS-SP4: util-linux

The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fix(es):

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.(CVE-2025-14104)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10072-1 openSUSE-SU-2026:10072-1 — libblkid-devel-2.41.3-1.1 on GA media 2026-10-05T22:48:53.365054+00:00

libblkid-devel-2.41.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:2485 RHSA-2026:2485 — Red Hat Security Advisory: Insights proxy Container Image 2026-10-05T22:48:53.365071+00:00

curl: libcurl: Curl out of bounds read for cookie path openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file glib: Integer overflow in in g_escape_uri_string() util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing openssl: OpenSSL: Denial of Service via malformed TimeStamp Response openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

 https://cve.radiocsirt.org/vuln/suse-su-2026:0115-1 SUSE-SU-2026:0115-1 — Security update for util-linux 2026-10-05T22:48:53.365114+00:00

Security update for util-linux

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14104 UBUNTU-CVE-2025-14104 2026-10-05T22:48:53.365130+00:00

Affected: Ubuntu:14.04:LTS: util-linux, Ubuntu:Pro:16.04:LTS: util-linux, Ubuntu:18.04:LTS: util-linux, Ubuntu:Pro:20.04:LTS: util-linux

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2755 WID-SEC-W-2025-2755 — util-linux: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen 2026-10-05T22:48:53.365153+00:00

Ein lokaler Angreifer kann eine Schwachstelle in util-linux ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.