Back Linuxsecurity Fedora 42: util-linux Critical Buffer Overflow CVE-2025
The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, util-linux contains the fdisk configuration tool and the login program. Update Information : fix setpwnam() buffer use [CVE-2025-14104] libblkid: use snprintf() instead of sprintf()
The util-linux package contains a large variety of low-level system
utilities that are necessary for a Linux system to function. Among
others, util-linux contains the fdisk configuration tool and the login
fix setpwnam() buffer use [CVE-2025-14104] libblkid: use snprintf() instead of sprintf()
* Mon Dec 15 2025 Karel Zak - 2.40.4-8 - fix setpwnam() buffer use [CVE-2025-14104] - libblkid: use snprintf() instead of sprintf()
* Mon Dec 15 2025 Karel Zak - 2.40.4-8 - fix setpwnam() buffer use [CVE-2025-14104] - libblkid: use snprintf() instead of sprintf()
[ 1 ] Bug #2419370 - CVE-2025-14104 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames [fedora-42]
[ 1 ] Bug #2419370 - CVE-2025-14104 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames [fedora-42]
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-fc18ab1e37' at the command line. For more information, refer to the dnf documentation available at
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
