ZeroDay Findings
Sign inSign up

Findings

CVE-2025-14104

A flaw was found in util-linux.

Published Dec 5, 2025 · updated Oct 14, 2026

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 5, 2025 · NIST NVD

    Detected

    A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

  3. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

Sources

  • CVE.orgVulnerability recordCVE-2025-14104

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-14104

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDVulnerability recordCVE-2025-14104

    A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

    nvd.nist.gov

References