CVE-2025-14104

Publication date

2025-12-05 16:22:09

Family

redhat

State

PUBLISHED

Description

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.