SUSE-SU-2026:21016-1: util-linux-systemd&distro=SUSE Linux Micro 6.2 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 09-04-2026Last modified 14-04-2026
Open JSON

Vulnerability summary

SUSE-SU-2026:21016-1 is a vulnerability in util-linux-systemd&distro=SUSE Linux Micro 6.2 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0 · Related 2
CVE-2025-14104CVE-2026-3184

Timeline

  1. 09-04-2026
    PublishedVulnerability first disclosed.
  2. 14-04-2026
    Last modifiedVulnerability information updated.

Description

Security update for util-linux This update for util-linux fixes the following issues: Security issues: - CVE-2025-14104: heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - CVE-2026-3184: access control bypass due to improper hostname canonicalization in `login` (bsc#1258859). Non security issues: - fdisk: Fix possible partition overlay and data corruption if EBR gap is missing (bsc#1222465). - lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse2 products
  • util-linux-systemd&distro=SUSE Linux Micro 6.2< 2.41.1-160000.3.1
  • util-linux&distro=SUSE Linux Micro 6.2< 2.41.1-160000.3.1

1 vendor · 2 products

References

6 links