A newly recorded vulnerability in the util‑linux project — tracked as CVE‑2025‑14104 — permits a heap buffer overread in the setpwnam code path when processing 256‑byte usernames, creating a local denial‑of‑service and potential information‑disclosure hazard for SUID login utilities that write...
A critical vulnerability unveiled by Varonis Threat Labs has thrust Microsoft Azure’s landscape of AI and High-Performance Computing (HPC) workloads into the cybersecurity spotlight. The flaw, entrenched within the AZNFS-mount utility, exposes a pathway where an unprivileged local user could...