CVE-2025-14104 · Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

util-linux

Versions

• ≥ 0, < 2.41.3: Affected (semver)

Update to 2.41.3

red hat enterprise linux 10

Versions

• ≥ 0:2.40.2-15.el10_1: Not affected (rpm)

No fix published

red hat enterprise linux 8

Versions

• ≥ 0:2.32.1-48.el8_10: Not affected (rpm)

No fix published

red hat enterprise linux 9

Versions

• ≥ 0:2.37.4-21.el9_7: Not affected (rpm)

No fix published

cert manager support for red hat openshift release 1.18

Versions

• ≥ 1791459707: Not affected (rpm)

No fix published

cert manager support for red hat openshift release 1.18

Versions

• ≥ 1791459711: Not affected (rpm)

No fix published

cert manager support for red hat openshift release 1.18

Versions

• ≥ 1791459759: Not affected (rpm)

No fix published

cert manager support for red hat openshift release 1.18

Versions

• ≥ 1789029076: Not affected (rpm)

No fix published

cert manager support for red hat openshift release 1.18

Versions

• ≥ 1791966259: Not affected (rpm)

No fix published

red hat ceph storage 7

Versions

• ≥ 1770632724: Not affected (rpm)

No fix published

red hat ceph storage 8

Versions

• ≥ 1770630907: Not affected (rpm)

No fix published

red hat ceph storage 9

Versions

• ≥ 1771816028: Not affected (rpm)

No fix published

red hat hardened images

Versions

• ≥ 2.42-7.1.hum1: Not affected (rpm)

No fix published

red hat insights proxy 1.5

Versions

• ≥ 1770740405: Not affected (rpm)

No fix published

red hat update infrastructure 5

Versions

• ≥ 1770646925: Not affected (rpm)

No fix published

red hat update infrastructure 5

Versions

• ≥ 1773670073: Not affected (rpm)

No fix published

red hat update infrastructure 5

Versions

• ≥ 1773672059: Not affected (rpm)

No fix published

red hat update infrastructure 5

Versions

• ≥ 1773670137: Not affected (rpm)

No fix published

red hat enterprise linux 6

No fix published

red hat enterprise linux 7

No fix published

red hat openshift container platform 4

No fix published

util-linux Debian:12

Versions

• 2.38.1-5
• 2.38.1-5+deb12u1
• 2.38.1-5+deb12u2
• 2.38.1-5+deb12u3
• 2.38.1-5+loong64
• 2.38.1-6
• 2.39.1-1
• 2.39.1-2
• 2.39.1-3
• 2.39.1-4
• 2.39.2-1
• 2.39.2-2
• 2.39.2-2.1
• 2.39.2-2.2
• 2.39.2-3
• 2.39.2-4
• 2.39.2-5
• 2.39.2-6
• 2.39.3-1
• 2.39.3-10
• 2.39.3-11
• 2.39.3-2
• 2.39.3-3
• 2.39.3-4
• 2.39.3-5
• 2.39.3-6
• 2.39.3-6.1
• 2.39.3-6.1~exp1
• 2.39.3-7
• 2.39.3-8
• 2.39.3-9
• 2.40-1
• 2.40-2
• 2.40-3
• 2.40-4
• 2.40-5
• 2.40-6
• 2.40-7
• 2.40-8
• 2.40.1-1
• 2.40.1-2
• 2.40.1-3
• 2.40.1-4
• 2.40.1-4+hurd.1
• 2.40.1-6
• 2.40.1-7
• 2.40.1-8
• 2.40.1-8.1
• 2.40.1-9
• 2.40.2-1
• 2.40.2-10
• 2.40.2-11
• 2.40.2-12
• 2.40.2-12+hurd.1
• 2.40.2-13
• 2.40.2-14
• 2.40.2-2
• 2.40.2-3
• 2.40.2-4
• 2.40.2-5
• 2.40.2-6
• 2.40.2-7
• 2.40.2-8
• 2.40.2-9
• 2.40.3-1
• 2.40.4-1
• 2.40.4-2
• 2.40.4-3
• 2.40.4-4
• 2.40.4-5
• 2.40~rc2-1
• 2.40~rc2-2
• 2.40~rc2-3
• 2.40~rc2-4
• 2.40~rc2-5
• 2.40~rc2-6
• 2.40~rc2-7
• 2.40~rc2-8
• 2.41-1
• 2.41-2
• 2.41-3
• 2.41-4
• 2.41-5
• 2.41.1-1
• 2.41.1-2
• 2.41.1-3
• 2.41.1-4
• 2.41.2-1
• 2.41.2-2
• 2.41.2-3
• 2.41.2-4
• 2.41.3-1
• 2.41.3-2
• 2.41.3-3
• 2.41.3-4
• 2.41~rc1-1
• 2.41~rc1-2
• 2.41~rc2-1
• 2.42-1
• 2.42-2
• 2.42-3
• 2.42-4
• 2.42-5
• 2.42-6
• 2.42.1-1
• 2.42.1-2
• 2.42.1-3
• 2.42.1-4
• 2.42.1-5
• 2.42.1-6
• 2.42.2-1
• 2.42.2-2
• 2.42.2-3
• 2.42.2-4
• 2.42.3-1
• 2.42.4-1
• 2.42~rc1-1
• 2.42~rc1-2
• 2.42~rc1-3
• 2.42~rc2-1

Affected ranges

• ECOSYSTEM: (−∞, +∞)

No fix published

util-linux Debian:13

Versions

• 2.41-5
• 2.41.1-1
• 2.41.1-2
• 2.41.1-3
• 2.41.1-4
• 2.41.2-1
• 2.41.2-2
• 2.41.2-3
• 2.41.2-4

Affected ranges

• ECOSYSTEM: < 2.41.3-1

Update to 2.41.3-1

util-linux Debian:14

Versions

• 2.41-5
• 2.41.1-1
• 2.41.1-2
• 2.41.1-3
• 2.41.1-4
• 2.41.2-1
• 2.41.2-2
• 2.41.2-3
• 2.41.2-4

Affected ranges

• ECOSYSTEM: < 2.41.3-1

Update to 2.41.3-1