CVE-2025-14104

Name of the Vulnerable Software and Affected Versions util-linux (affected versions not specified)

Description A flaw exists in util-linux that allows a heap buffer overread when processing 256-byte usernames. This issue is specifically present within the setpwnam() function and impacts SUID (Set User ID) login-utils utilities that write to the password database. The vulnerability occurs when the setpwnam() function processes usernames.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.